Leaking the email of any YouTube user for $10,000
brutecat.com
What could've been the largest data breach in the world - an attack chain on Google services to leak the email address of any YouTube channel
  • KidMEnglish
    9·
    20 小时前

    Very nice approach!

    Some points about the article:

    Nature of the Vulnerability: The vulnerability is a security flaw that allows leaking the email associated with a YouTube channel by exploiting endpoints from both YouTube and Google Pixel Recorder.

    Impact: It allows an attacker to obtain the email associated with any YouTube channel, which can lead to phishing attacks, privacy invasion, and other malicious activities. This potentially affects all YouTube users who own a channel.

    Fix Status: The vulnerability has been fixed by Google. Both parts of the exploit were resolved by 02/09/2025, and the report was disclosed on 02/12/2025.